PT-2018-18725

Name of the Vulnerable Software and Affected Versions Synology Calendar versions prior to 2.1.2-0511 Description The issue is related to improper authorization, allowing remote authenticated users to create arbitrary events. This can be achieved via the cal id or original cal id parameters...

CVE-2018-8927: Incorrect Authorization

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the 1 calid or 2 originalcalid parameter...